#!/bin/bash
openssl x509 -pubkey -noout -in cert.pem \
    openssl pkey -pubin -outform der \
    openssl dgst -sha256 -binary \
    base64